General
- Target 2026-07-20_d48de133dff857146df89b42ed707367_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- Sample260720-c1apvacx2k
- SHA256 35101e96f4601e638e6b8e4dc8e7ba9dbacdada5f5b08e82388e3eed2c3a14d1
- MD5 d48de133dff857146df89b42ed707367
- SHA1 0a897595b1cd7ad07737094c9acf8c4d38c7d448
- SHA512 1b5ed17547ffc9d38d0c11f3660162cf3de061bc844a7657792587e5ecf20a74364b573d69f884b88b7e2ea172a329a6e54259ba79b1d889c484ee6055daa904
- SSDEEP 49152:9fU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:9fU/jIEeQfoR/IuOFVjUu5
- TLSH T1DDB58D12BAD58432F1B312319DB8C2695674B9A6473685EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_d48de133dff857146df89b42ed707367_amadey_avoslocker_elex_glassworm_hijackloader_luca-steal.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_d48de133dff857146df89b42ed707367_amadey_avoslocker_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_remcos_smoke-loader
- Size 2.2MB
- SHA256 35101e96f4601e638e6b8e4dc8e7ba9dbacdada5f5b08e82388e3eed2c3a14d1
- MD5 d48de133dff857146df89b42ed707367
- SHA1 0a897595b1cd7ad07737094c9acf8c4d38c7d448
- SHA512 1b5ed17547ffc9d38d0c11f3660162cf3de061bc844a7657792587e5ecf20a74364b573d69f884b88b7e2ea172a329a6e54259ba79b1d889c484ee6055daa904
- SSDEEP 49152:9fU/zXNUfEeXAxhF2rl/IuOryOvKODjj3POMjUfkptVxp/:9fU/jIEeQfoR/IuOFVjUu5
- TLSH T1DDB58D12BAD58432F1B312319DB8C2695674B9A6473685EFB3CC561E4F309C18E32F67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.